It seems several packages have made it out to the mirrors without
signatures. It doesn't appear to be every package. The following are the
ones I know about:
ERROR: busybox-1.27.2-r10: UNTRUSTED signature
ERROR: ssl_client-1.27.2-r10: UNTRUSTED signature
ERROR: busybox-suid-1.27.2-r10: UNTRUSTED signature
And if you run:
curl --silent
https://dl-3.alpinelinux.org/alpine/v3.7/main/x86_64/busybox-1.27.2-r10.apk
| gunzip | tar --list
Note lack of an SIGN.RSA file. (I'm assuming that is the file which is
supposed to hold the signature.)
L~
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
On Mon, 4 Jun 2018 20:53:31 -0500
Ladar Levison <ladar@lavabit.com> wrote:
> It seems several packages have made it out to the mirrors without> signatures. It doesn't appear to be every package. The following are the> ones I know about:> > ERROR: busybox-1.27.2-r10: UNTRUSTED signature> ERROR: ssl_client-1.27.2-r10: UNTRUSTED signature> ERROR: busybox-suid-1.27.2-r10: UNTRUSTED signature
This should be fixed now. Thanks for the report.
-nc
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
On 06/07/2018 06:23 AM, Natanael Copa wrote:
> On Mon, 4 Jun 2018 20:53:31 -0500> Ladar Levison <ladar@lavabit.com> wrote:>>> It seems several packages have made it out to the mirrors without>> signatures. It doesn't appear to be every package. The following are the>> ones I know about:>>>> ERROR: busybox-1.27.2-r10: UNTRUSTED signature>> ERROR: ssl_client-1.27.2-r10: UNTRUSTED signature>> ERROR: busybox-suid-1.27.2-r10: UNTRUSTED signature> This should be fixed now. Thanks for the report.
Fix confirmed. The box building robots are once again happy. Thank you.
L~
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---